CVE-2026-61078

CVE-2026-61078 affects Oracle PeopleSoft 9.2, specifically the CC Common Application Objects component. The flaw exists in the Common Application Objects and can be exploited by a low-privilege, network-connected attacker over HTTP; exploitation requires user interaction. Impact is unauthorized c...

CVE-2026-61077

CVE-2026-61077 affects Oracle PeopleSoft SCM Mobile Inventory Management (component: Security) in version 9.2. The published description indicates a vulnerability accessible to a low-privileged attacker with logon to the infrastructure hosting PeopleSoft SCM Mobile Inventory Management, potential...

CVE-2026-61079

...

CVE-2026-61074

The CVE-2026-61074 concern affects Oracle PeopleSoft FIN Common Objects Brazil (component: eProcurement) with affected version 9.1. The vulnerability is exploitable by an unauthenticated attacker over HTTP, enabling takeover of PeopleSoft Enterprise FIN Common Objects Brazil and is scored CVSS 3....

CVE-2026-61071

CVE-2026-61071 affects Oracle PeopleSoft (FIN Engineering Argentina) Engineering component, version 9.1. The vulnerability allows a high-privileged attacker with network access via HTTP to potentially perform unauthorized updates/inserts/deletes and read access on affected data. CVSS 3.1 base sco...

CVE-2026-61072

...

CVE-2026-61069

...

CVE-2026-61070

The CVE-2026-61070 entry concerns Oracle PeopleSoft Enterprise FIN Common Objects Argentina (component: Cash Management), affected in version 9.1. The vulnerability allows an unauthenticated attacker with network access via HTTP to impact availability, enabling a partial denial of service. CVSS 3...

CVE-2026-61065

...

CVE-2026-61063

...

CVE-2026-61062

CVE-2026-61062 affects Oracle PeopleSoft Enterprise FIN Cash Management (Cash Management component) for the 9.2 release. The vulnerability is exploitable locally by a user with logon to the infrastructure where PeopleSoft runs, with low privileges, and can compromise the Cash Management component...

CVE-2026-61057

Technical details for CVE-2026-61057 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, impact, or fixes are disclosed here. Monitor Oracle advisories and NVD updates for new information.

CVE-2026-61057

...

CVE-2026-61049

...

CVE-2026-61048

...

CVE-2026-61041

Summary (supported): CVE-2026-61041 affects Oracle Demantra Demand Management (Oracle Supply Chain) with affected versions 12.2.3–12.2.15. The issue is exploitable over HTTP by a low-privileged, network-accessible attacker and can lead to takeover of the Demantra module; impacts may extend to rel...

CVE-2026-61044

...

CVE-2026-61041

...

CVE-2026-61037

CVE-2026-61037 affects Oracle Loans in Oracle E-Business Suite (Internal Operations) for versions 12.2.3–12.2.15. The vulnerability allows a low-privileged, unauthenticated attacker with network access via HTTP to compromise Oracle Loans, enabling unauthorized creation, deletion or modification o...

CVE-2026-61039

CVE-2026-61039 affects Oracle E-Business Suite Oracle Advanced Supply Chain Planning (Core) with affected versions 12.2.3–12.2.15. The vulnerability allows a high-privilege attacker with network access via HTTP to take over the affected product. Documented impact is takeover with CVSS v3.1 base s...